> #bro -r tcp6.pcap > > 1231818666.514747 weird: spontaneous_FIN > > there are no *.log files (conn.log, etc). Well, you haven't listed a script to process it with. Per the private note I just sent you, bro -f ip6 -r tcp6.pcap mt will generate the usual log files. (I overlooked -f ip6 - thanks, Seth!) Vern